Fortinet NSE7_EFW-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.0 Online Questions & Answers

• Question 1:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  B. Since the counters were last reset; the 10.200.3.1 peer has never been down.
  C. The local router has received a total of three BGP prefixes from all peers.
  D. The local router has not established a TCP session with 100.64.3.1.
  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  D. The local router has not established a TCP session with 100.64.3.1.

• Question 2:

  An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which one of the following statements about this command is true?

  A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
  B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
  C. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
  D. Sends a link failed signal to all connected devices.
  A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

• Question 3:

  View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

  

  Which of the following statements about the output shown are correct? (Choose two.)

  A. There are 166 TCP sessions waiting to complete the three-way handshake.
  B. All the sessions in the session table are TCP sessions.
  C. There are 0 ephemeral sessions.
  D. No sessions have been deleted because of memory pages exhaustion.
  C. There are 0 ephemeral sessions.
  D. No sessions have been deleted because of memory pages exhaustion.

• Question 4:

  View the central management configuration shown in the exhibit, and then answer the question below.

  

  Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

  A. 10.0.1.244
  B. Public FortiGuard servers
  C. 10.0.1.240
  D. 10.0.1.242
  B. Public FortiGuard servers

• Question 5:

  View the exhibit, which contains a session table entry, and then answer the question below.

  

  Which one of the following statements is true regarding FortiGates's inspection of this session?

  A. FortiGate applied flow-based inspection.
  B. FortiGate applied proxy-based inspection.
  C. FortiGate forwarded this session without any inspection.
  D. FortiGate applied NGFW flow-based inspection.
  B. FortiGate applied proxy-based inspection.

• Question 6:

  View these partial outputs from two routing debug commands:

  

  Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

  A. Both port1 and port2
  B. port3
  C. port2
  D. port1
  A. Both port1 and port2

• Question 7:

  Which of the following statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

  A. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.
  B. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
  C. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
  D. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.
  B. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
  C. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

• Question 8:

  View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

  

  Why didn't the tunnel come up?

  A. The remote gateway is using aggressive mode and the local gateway is configured to use main mode.
  B. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
  C. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration
  D. The pre-shared keys do not match.
  B. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

• Question 9:

  View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

  

  Which of the following statements about this debug output are correct? (Choose two.)

  A. It shows a phase 1 negotiation.
  B. The initiator has provided remote as its IPsec peer ID.
  C. The negotiation is using AES128 encryption with CBC hash.
  D. The remote gateway IP address is 10.0.0.1.
  A. It shows a phase 1 negotiation.
  B. The initiator has provided remote as its IPsec peer ID.

• Question 10:

  View the following FortiGate configuration.

  

  All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network.

  

  If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

  A. The session would be deleted, so the client would need to start a new session.
  B. The session would remain in the session table, and its traffic would still egress from port1.
  C. The session would remain in the session table, and its traffic would start to egress from port2.
  D. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
  B. The session would remain in the session table, and its traffic would still egress from port1.